AMENDMENTS TO THE CLAIMS 
1 . (Currently Amended) An encrypted communication system comprising a first device and a 
second device, wherein 

the first device (i) encrypts a 4s ifirst key using a public key of the second device to generate 
j-s tfirst encrypted data, and transmits the 4-stfirst encrypted data to the second device, (ii) receives 
3ndsecond encrypted data from the second device, the second encrypted data being generated by 
encrypting a third key of the second device using a public key of the first device at the second 
device, and decrypts the Sndsecond encrypted data using a secret key of the first device to obtain a 
Snd second key, and (iii) generates, based on the -j-s4 first and 3ndsecond keys, a -j-s tfirst encryption 
key for use in communication with the second device, 

the second device (i) encrypts a -the third^ fd key using a-the public key of the first device 
to generate the Sndsccond encrypted data, and transmits the Sndsecond encrypted data to the first 
device, (ii) receives the -tstfirst encrypted data from the first device, and decrypts the 4-s tfirst 
encrypted data using a secret key of the second device to obtain a 4t hfourth key, and (iii) 
generates, based on the ^ dthird and 4* hfourth keys, a 3fidsecond encryption key for use in 
communication with the first device, and 

the first and second devices perform encrypted communication using the 4-s 4first and 
3ndsecond encryption keysr 

wherein the first device generates the first encryption key and a first hash key based on 
the first and second keys, calculates using the first hash key a first hash value for first 
transmission data, encrypts the first transmission data using the first encryption key to generate 
encrypted first transmission data, and transmits the first hash value and the encrypted first 
transmission data to the second device, and 

wherein the second device generates the second encryption key and a second hash key 
based on the third and fourth keys, receives from the communication device the first hash value 
and the encrypted first transmission data, decrypts the encrypted first transmission data using the 
second encryption key corresponding to the first encryption key, calculates using the second 
hash key a second hash value for the decrypted first transmission data, and determines that the 
first transmission data is not tampered when the received first hash value matched the calculated 
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second hash value. 



2. (Currently Amended) A communication device for performing encrypted communication 
with another device using a shared key, comprising: 

a data generation unit operable to encrypt a 4-s4first key using a public key that 
corresponds to a secret key held by the other device to generate 4st first encrypted key data, and 
transmit the - Mfirst encrypted key data to the other device; 

a decryption unit operable to receive, from the other device, 3ndsecond encrypted key 
data generated by the other device , the other device generating the second encrypted key data by 
encrypting a ^f dthird key using a public key of the communication device, and decrypt the 
Snd second encrypted key data using a secret key of the communication device to obtain a 
Snd second key; 

a key generation unit operable to generate m -a first encryption key based on the -j-s ifirst 
and Sa dsecond keys; and 

a communication unit operable to perform encrypted communication with the other 
device using the first encryption key, the other device receiving from the communication device 
the first encrypted key data, decrypting the first encrypted key data using a secret key of the 
other device to obtain a fourth key, and generating a second encryption key corresponding to the 
first encryption key based on the third and fourth keys,k -e¥r- 

wherein the key generation unit further generates the first encryption key and a first hash 
key based on the first and second keys, 

the communication device includes: 

a calculation unit operable to calculate, using the first hash key, a first hash value for 
transmission data; and 

an encryption unit operable to encrypt the transmission data using the first encryption key 
to generate encrypted transmission data, and 

the communication unit further transmits the first hash value and the encrypted 
transmission data to the other device, and 

wherein the communication device includes an authentication unit operable to: 
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receive from the other device a second hash value for second transmission data 
and encrypted second transmission data, the other device generates the second encryption 
key and a second hash key based on the third and fourth keys, calculates using the second 
hash key the second hash value for the second transmission data, encrypts the second 
transmission data using the second encryption key to generate encrypted second 
transmission data, and transmits the second hash value and the encrypted second 
transmission data to the communication device; 

decrypt the encrypted second transmission data using the first encryption key; 

calculate using the first hash key a second hash value for the decrypted second 
transmission data; and 

determine that the second transmission data is not tampered when the received 
second hash value matches the calculated second hash value. 

3. (Canceled) 

4. (Currently Amended) The communication device of claim 32, wherein the key generation 
unit concatenates the 4s ifirst and Sft dsecond keys to generate concatenated data, calculates a 
third hash value for the concatenated data, and generates the Istfirst encryption key and the 
j-stfirst hash key based on the third hash value for the concatenated data vafae. 

5. (Currently Amended) The communication device of claim 23, wherein the key generation 
unit performs an exclusive OR operation using the -j-s ifirst and Sftdsecond keys, and generates 
the Istfirst encryption key and the 4-stfirst hash key based on a result of the operation. 

6-9. (Canceled) 

10. (Currently Amended) The communication device of claim 2, wherein 

the data generation unit encrypts the Ist first key based on a key encapsulation 
mechanism to generate the -ts tfirst encrypted key data, and 
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the decryption unit decrypts the Sn dsecond encrypted key data based on a key decryption 
mechanism to obtain the Sndsecond key. 

1 1 . (Currently Amended) A method used by a communication device that performs encrypted 
communication with another device using a shared key, comprising the stops of : 

encrypting a j-st first key using a public key that corresponds to a secret key held by the 
other device to generate -krt first encrypted key data, and transmitting the lstoncryptod key data to 
the other device ; 

transmitting the first encrypted key data to the other device; 

receiving, from the other device, Sn dsecond encrypted key data generated by the other 
devie e, the other device generating the second encrypted key data by encrypting a 3fd third key 
using a public key of the communication device; device, and decrypting the 2nd encrypted key 
data using a secret key of the communication device to obtain a 2nd key; 

decrypting the second encrypted key data using a secret key of the communication device 
to obtain a second key; 

generating an -a first encryption key and a first hash key based on the -j-s tfirst and 
Snd sccond keys; and 

performing encrypted communication with the other device using the first encryption 
key, the other device receiving from the communication device the first encrypted key data, 
decrypting the first encrypted key data using a secret key of the other device to obtain a fourth 
key, and generating a second encryption key corresponding to the first encryption key based on 
the third and fourth keys, 

calculating using the first hash key a first hash value for transmission data; 

encrypt the transmission data using the first encryption key to generate encrypted 
transmission data; and 

transmitting the first hash value and the encrypted transmission data to the other device; 

receiving from the other device a second transmission data and encrypted second 
transmission data, the other device generating the second encryption key and a second hash key 
based on the third and fourth keys, calculating using the second hash key the second hash value 
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for the second transmission data, encrypting the second transmission data using the second 
encryption key to generate encrypted second transmission data, and transmitting the second hash 
value and the encrypted second transmission data to the communication device; 

decrypting the encrypted second transmission data using the first encryption key; 

calculating using the first hash key a second hash value for the decrypted second 
transmission data; and 

determine that the second transmission data is not tampered when the received second 
hash value matches the calculated second hash value.k -eyr 

12. (Currently Amended) A computer program recorded on a computer-readable medium, the 
computer program being used by a communication device that performs encrypted 
communication with another device using a shared key, the computer program causing a 
computer to execute the stops of : 

encrypting a -tstflrst key using a public key that corresponds to a secret key held by the 
other device to generate -ki first encrypted key data; data, and transmitting the - lstonoryptod key 
data to th e oth e r d e vic e ; 

transmitting the first encrypted key data to the other device; 

receiving, from the other device, 2-n dsecond encrypted key data generated by the other 
de¥te e, the other device generating the second encrypted key data by encrypting a ^d third key 
using a public key of the communication device; device, and decrypting the 2ndencrypted key 
data using a secret key of the communication dovico to obtain a 2nd key; 

decrypting the second encrypted key data using a secret key of the communication device 
to obtain a second key; 

generating an -a first encryption key and a first hash key based on the Istfirst and 
Sftdsecond keys; and 

performing encrypted communication with the other device using the first encryption 
key, the other device receiving from the communication device the first encrypted key data, 
decrypting the first encrypted key data using a secret key of the other device to obtain a fourth 
key, and generating a second encryption key corresponding to the first encryption key based on 
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the third and fourth keys, 

calculating using the first hash key a first hash value for transmission data; 

encrypting the transmission data using the first encryption key to generate encrypted 
transmission data; and 

transmitting the first hash value and the encrypted transmission data to the other device; 

receiving from the other device a second hash value for second transmission data and 
encrypted second transmission data, the other device generating the second encryption key and a 
second hash key based on the third and fourth keys, calculating using the second hash key the 
second hash value for the second transmission data, encrypting the second transmission data 
using the second encryption key to generate encrypted second transmission data, and 
transmitting the second hash value and the encrypted second transmission data to the 
communication device; 

decrypting the encrypted second transmission data using the first encryption key; 

calculating using the first hash key a second hash value for the decrypted second 
transmission data; and 

determining that the second transmission data is not tampered when the received second 
hash value matches the calculated second hash valuek -ey. 

13. (Canceled) 



